Casio Calculator Hacking
Technical / emulation
1
1
regs.dsr and cur_dsr but they all say 0
// DSR Prefix Instruction
void instr_dsr(struct u8_core *core, uint8_t flags, struct u8_oper *op0, struct u8_oper *op1) {
core->cur_dsr = oper_read(core, op0);
u8_step(core);
core->cur_dsr = 0;
} 
CASIO cannot touch me =)) CASIO cannot touch me =)) 
1
1
1 1
1
1
AX/EAX/rAX anyway M-x butterfly
1
using namespace std; 1
1import some_module
vs.
from some_module import * some_module.inside vs inside
1
1?????? 
1 1 1 1 1 1
exe, so you guys don't need to install Python3 before running the application.
1
1
1
1 1 2 1
2
ncurses version of the emulator, but I still cannot boot the real rom rom.bin when it's not encrypted, it'll just get garbage // !! Check for raw/encrypted ROM
if (romData[0] === 0 && romData[1] === 0xf0 && !(romData.length & romData.length - 1)) {
this._WriteCodeMemory(0, romData.length, romData)
} else {
this._LoadHexFile(rom, romData)
} core.dat (rom file) with fx991cnx's rom.bin in ClassicEmu/models takinekotfs/CASIO-fx is completely copied from others, and no more contribution will make in it 
3
1 1
1
1 2
1
KO right s, [enter] and [space] but none of them works; 2)The jump to function doesn't work, as it returns:
File "main.py", line 296, in set_csr_pc
self.sim.sim.core.regs.csr = int(csr_entry, 16) if csr_entry else 0
(...)
AttributeError: function 'core' not found void* DataMemory) and read a block of memory from there
ERROR or random errors (e returns Insufficient MEM lol); The index on the left of TABLE mode output is always 0 
♂️
uint8_t[]
♂️
make but it didn't help when I tried to install SDL2
public void parseInstruction(int o) --> void parseInstruction(Processor *p, int o)
0F
69
2B. glitch string pointers sure are weird (because they are)
0xD000 bytes 
Each sample counts as 0.01 seconds.
% cumulative self self total
time seconds seconds calls ms/call ms/call name
51.22 0.42 0.42 _mcount_private
23.17 0.61 0.19 7617578 0.00 0.00 coreStep
12.20 0.71 0.10 8628494 0.00 0.00 memoryGetCodeWord
4.88 0.75 0.04 1516594 0.00 0.00 memoryGetData
4.88 0.79 0.04 __fentry__
1.22 0.80 0.01 6259991 0.00 0.00 memorySetData
1.22 0.81 0.01 1 10.00 10.00 coreReset
1.22 0.82 0.01 _pushValue
0.00 0.82 0.00 1 0.00 0.00 memoryInit 
100x sqrt(
F031H) being corrupted
BRK slide at some point
press_cb checks the event type to see if its a keyboard press or mouse click
if its a mouse click, it checks if the X and Y positions are in the correct ranges
if its a keyboard press, it checks if the keysym is correct, i convert the keysym to lowercase so uppercase and lowercase will both work
then it checks if we're running in real ROM mode or emulator ROM mode
if its real, it adds the key we pressed to a set that keeps track of what keys are held down
if its emulator it writes to the emulator keyboard immediately (since you cannot hold keys on emulator) 
111111(1(1)r on fx-570ES+ VerE real still doesn't work, users emu also crashes 
1
♂️ 
8E00H - EFFFH set as read-only? ) 
F050H to 3
1
Press AC text) 
if self.sim.core.regs.dsr > 8: logging.warning(f'DSR is above 8 (DSR = {self.sim.core.regs.dsr:02X})')
and this appears
CMP
image 2: at CMPC
image 3: at BLE
1R1 - (0xFF + 1) = R1 - 0 CMPC, since the carry flag is added to the second operand 3:E4F8H F085 MOV ER0, ER8
3:E4FAH E082 ADD ER0, #02H
3:E4FCH 70FF CMP R0, #FFH
3:E4FEH 51FF CMPC R1, #FFH
3:E500H C302 BLE .l_01A
3:E502H F300E5B6 B f_3E5B6 
3:E4F8H F085 MOV ER0, ER8
3:E4FAH E082 ADD ER0, #02H
3:E4FCH 70FF CMP R0, #FFH
3:E4FEH 51FF CMPC R1, #FFH
3:E500H C302 BLE .l_01A
3:E502H F300E5B6 B f_3E5B6 BLE is unsigned <=CMP and CMPC takes same amount of cycles, btw 
1+1! But sqrt(2) returns... not 1.414213562 
no offense btw
sqrt(1.9999999999999999 returns 1.414213562 sqrt(1.9999999999999999 returns 1.414213562 
printf("--\n");
printf("PC: %hx\n", core->regs.pc);
for (int i = 0; i < 16; i++) printf("R%d: %hhd\n", i, core->regs.gp[i]); here: https://github.com/Fraserbc/u8_emu/blob/main/src/core/core.c#L19 
Pd- Read OK appears 8E00H to 2 on the official emulator freezes it until you press ON 
lru_cache for the screen byte grabbing functionpop pc is... ret 98ae is an address 
far_call_stub push lr
push er8
mov er8, er0
;;void y(x z) { z(); z(); }
bl er0
bl er8
pop er8
pop pc
end void wwce_gather_feedback(uint16_t pc, uint16_t csr, bool btaken) {
uint32_t realpc = uint32_t(pc) | (uint32_t(csr) << 16);
printf("%05x => %s\n", realpc, btaken ? "taken" : "not taken");
} quality code 
0x7bb4: push {lr}
0x7bb6: cmp r2, 0
0x7bb8: b.nv 0x7bbe
0x7bba: cmp r2, 0xb
0x7bbc: b.lt 0x7bc0
0x7bc0: add r2, 0xff
0x7bc2: mov er4, 0xa
0x7bc4: mul er4, r2
0x7bc6: mov r0, 0x48
0x7bc8: mov r1, 0x10
0x7bca: add er4, er0
0x7bcc: lea [er4]
0x7bce: ld qr0, [ea+]
0x7bd0: ld er8, [ea+]
0x7bd2: ld r0, [0x8010]
0x7bd6: lea [0x8010]
0x7bda: st qr0, [ea+]
0x7bdc: st er8, [ea+]
0x7bde: rt
0x7b66: b.nop 0x7b6c
0x7b6c: mov r2, 0
0x7b6e: st r2, [0x800f]
0x7b72: pop {pc} 0x7bb4: push {lr}
0x7bb6: cmp r2, 0
0x7bb8: b.nv 0x7bbe
0x7bba: cmp r2, 0xb
0x7bbc: b.lt 0x7bc0
0x7bc0: add r2, 0xff
0x7bc2: mov er4, 0xa
0x7bc4: mul er4, r2
0x7bc6: mov r0, 0x48
0x7bc8: mov r1, 0x10
0x7bca: add er4, er0
0x7bcc: lea [er4]
0x7bce: ld qr0, [ea+]
0x7bd0: ld er8, [ea+]
0x7bd2: ld r0, [0x8010]
0x7bd6: lea [0x8010]
0x7bda: st qr0, [ea+]
0x7bdc: st er8, [ea+]
0x7bde: rt
0x7b66: b.nop 0x7b6c
0x7b6c: mov r2, 0
0x7b6e: st r2, [0x800f]
0x7b72: pop {pc} 0x7bbe should be 7bbeh)b.cond is wrongld should be lDadr is not wrapped in brackets♂️HC flag0x7bbe should be 7bbeh)b.cond is wrongld should be lDadr is not wrapped in brackets
crop = config.status_bar_crops[i]
IndexError: tuple index out of range python main.py configs.config_fx83gtx_emu to run
if (ctx->core.regs.pc == 0x2ec0 || count % 1000 == 0) what's located at 0x2ec0? 
F008H
FC00H first bytes of segment 8, all bytes in segment 1 - 4, E000H first bytes of segment 5 and 1FF6H first bytes in segment 7 def sbycon(self):
sbycon = self.sim.sfr[9]
if sbycon & (1 << 1) and all(self.stop_accept):
self.stop_mode = True
self.stop_accept = [False, False]
self.sim.sfr[8] = 0
self.sim.sfr[9] = 0
self.sim.sfr[0x22] = 0
self.sim.sfr[0x23] = 0 def timer(self):
if self.sim.sfr[0x25] & 1:
counter = (self.sim.sfr[0x23] << 8) + self.sim.sfr[0x22]
target = (self.sim.sfr[0x21] << 8) + self.sim.sfr[0x20]
counter = (counter + 1) & 0xffff
self.sim.sfr[0x22] = counter & 0xff
self.sim.sfr[0x23] = counter >> 8
if counter == target and self.stop_mode:
self.stop_mode = False
self.sim.sfr[9] &= ~(1 << 1)
self.sim.sfr[0x14] = 0x20
if not config.real_hardware:
for i in range(3):
if config.hardware_id == 0: self.sim.data_mem[0x800 + i] = 0
if config.hardware_id in (4, 5): self.sim.rw_seg[0x8e00 + i] = 0
else: self.sim.data_mem[0xe00 + i] = 0sbycon function?
printf inside the sbycon if statement? sbycon variable
2. the stop_accept array 
1
1
F310H to 0x10 (makes the calculator think it's receiving solar power) 
read_mem_data and write_mem_data if possible
// uint8_t ready = read_mem_data(&ctx->core, 0, 0x8e00, 1); // this works
uint8_t ready = emu_kb[0]; // this doesn't 
u8-emu-frontend but i still have it in simu8-frontend
♂️
c++
inline void operator++() {
do {
auto h = (ImageItem*)m_addr;
m_addr += h->m_paylen + 8;
if (this->operator*().m_tag == Tag::compatible) {
auto& ent = this->operator*();
if (ent.m_paylen != strlen(compatible)) {
printf("E: incompatible rom8 file\n");
exit(1);
}
if (memcmp(ent.m_pay, compatible, ent.m_paylen)) {
printf("E: incompatible rom8 file\n");
exit(1);
}
} else {
break;
}
} while (true);
} c++
inline void operator++() {
do {
auto h = (ImageItem*)m_addr;
m_addr += h->m_paylen + 8;
if (this->operator*().m_tag == Tag::compatible) {
auto& ent = this->operator*();
if (ent.m_paylen != strlen(compatible)) {
printf("E: incompatible rom8 file\n");
exit(1);
}
if (memcmp(ent.m_pay, compatible, ent.m_paylen)) {
printf("E: incompatible rom8 file\n");
exit(1);
}
} else {
break;
}
} while (true);
} 
c++
virtual void loadRomData(rom8::File& file) {
for (auto& rdat : file) {
if (rdat.m_tag == rom8::Tag::rom) {
if (rdat.m_paylen != 0x20000) {
printf("E: rom size invalid\n");
exit(1);
}
m_rom = rdat.m_pay;
}
if (rdat.m_tag == rom8::Tag::calcType) {
if (rdat[0] != (0x1 | 0x4)) {
printf("E: rom for invalid calculator type (byte: %d)\n", rdat[0]);
exit(1);
}
}
}
} 
07e34
07e20
07e22
07e24
07e26
07e28
07e2a
07e2c
07e2e
07e30
07e32
07e34 0:37E4H F00CF008 LEA F008H
0:37E8H 0250 MOV R2, #50H
0:37EAH 03A0 MOV R3, #A0H
0:37ECH 9231 ST R2, [EA]
0:37EEH 9351 ST R3, [EA+]
0:37F0H 0002 MOV R0, #02H
0:37F2H 9031 ST R0, [EA]
0:37F4H FE8F NOP
0:37F6H FE8F NOP 
compatible tags are used in one file? for now i'll just make it an error struct DisplayBounds {
/* 0x00 */ uint16_t x;
/* 0x02 */ uint16_t y;
/* 0x04 */ uint16_t width;
/* 0x06 */ uint16_t height;
/* 0x08 */ uint16_t scale;
}
the tool8 script appears to write width and height first... struct DisplayBounds {
/* 0x00 */ uint16_t x;
/* 0x02 */ uint16_t y;
/* 0x04 */ uint16_t width;
/* 0x06 */ uint16_t height;
/* 0x08 */ uint16_t scale;
}
the tool8 script appears to write width and height first... 8E00H to EFFFH read only enum EmuRequest {
GetKey = 1,
ACBreak = 2,
Shutdown = 3,
ddSomething = 4,
StartQR11 = 5,
StopQR = 6,
StartQR3 = 7,
ACBreak2 = 8,
}; IM_EY.ES_STOP_GETKEY = 0x01 // �L�[�҂�
IM_EY.ES_STOP_ACBREAK = 0x02 // AcBreak�`�F�b�N
IM_EY.ES_STOP_DOOFF = 0x03 // OFF
IM_EY.ES_STOP_DDOUT = 0x04 // DD �\��
IM_EY.ES_STOP_QRCODE_IN = 0x05 // QR Ver.11 �J�n�iURL����������j
IM_EY.ES_STOP_QRCODE_OUT = 0x06 // QR �I��
IM_EY.ES_STOP_QRCODE_IN3 = 0x07 // QR Ver.3 �J�n�iURL����������j
IM_EY.ES_STOP_ACBREAK2 = 0x08 // AcBreak�`�F�b�N <SRC_15270_ACBreakWithDD>IM_EY.ES_STOP_GETKEY = 0x01 // �L�[�҂�
IM_EY.ES_STOP_ACBREAK = 0x02 // AcBreak�`�F�b�N
IM_EY.ES_STOP_DOOFF = 0x03 // OFF
IM_EY.ES_STOP_DDOUT = 0x04 // DD �\��
IM_EY.ES_STOP_QRCODE_IN = 0x05 // QR Ver.11 �J�n�iURL����������j
IM_EY.ES_STOP_QRCODE_OUT = 0x06 // QR �I��
IM_EY.ES_STOP_QRCODE_IN3 = 0x07 // QR Ver.3 �J�n�iURL����������j
IM_EY.ES_STOP_ACBREAK2 = 0x08 // AcBreak�`�F�b�N <SRC_15270_ACBreakWithDD> ESHardInformationCY.js (classpad)
// ����STOP�����̃f�[�^ - What STOP Middle Data
export const ES_STOP_GETKEY = 0x01 // �L�[�҂� - Waiting for keys
export const ES_STOP_ACBREAK = 0x02 // AcBreak�`�F�b�N - ACBREAK check
export const ES_STOP_DOOFF = 0x03 // OFF
export const ES_STOP_DDOUT = 0x04 // DD �\�� - DD display
export const ES_STOP_QRCODE_IN = 0x05 // QR Ver.11 �J�n�iURL����������j- QR Ver.11 start (URL also comes in)
export const ES_STOP_QRCODE_OUT = 0x06 // QR �I�� - QR end
export const ES_STOP_QRCODE_IN3 = 0x07 // QR Ver.3 �J�n�iURL����������j- QR Ver. 3 start (URL comes in)
export const ES_STOP_ACBREAK2 = 0x08 // AcBreak�`�F�b�N <SRC_15270_ACBreakWithDD> - ACBREAK check
assert pay == SUPPORTED_ROM8 assert pay == SUPPORTED_ROM8 Traceback (most recent call last):
File "C:\Users\user\Desktop\casio\u8-emu-frontend\main.py", line 1467, in <module>
sim = Sim()
File "C:\Users\user\Desktop\casio\u8-emu-frontend\main.py", line 799, in __init__
tags = list(tool8.read8(config.rom_file))
File "C:\Users\user\Desktop\casio\u8-emu-frontend\tool8\tool8.py", line 68, in read8
assert pay == SUPPORTED_ROM8 
8:9000H that holds the high bits 
SimU8.dll instead of writing everything from ground up.SimU8.dll instead of writing everything from ground up. 
have to look at thiscasio.log in same directory as DLL and then orginal dll will log all cpu steps 
stpacp = self.sim.sfr[8]
if self.stop_accept[0]:
if stpacp & 0xa0 == 0xa0 and not self.stop_accept[1]: self.stop_accept[1] = True
elif stpacp & 0x50 != 0x50: self.stop_accept[0] = False
elif stpacp & 0x50 == 0x50: self.stop_accept[0] = True 2:0010H
SetPeriBCD is indeed somehow related to the F4xxH SFRs
1f_1B6CE in fx-82CW (EY-001A) emu rom rn 
1
EY-001 V.A Bt OK SUM8585 NG 000000000000 maybe more something like "Builit-in Coprocessor Device" maybe more something like "Builit-in Coprocessor Device" maybe more something like "Builit-in Coprocessor Device" 
VIM - Vi IMproved 8.2 (2019 Dec 12, compiled Aug 18 2023 04:12:26)VIM - Vi IMproved 8.2 (2019 Dec 12, compiled Aug 18 2023 04:12:26) 
echo $WAYLAND_DISPLAY $DISPLAYecho $WAYLAND_DISPLAY $DISPLAY wayland-0 :0wayland-0 :0 
./x script to cooperate
src/inter/con.tty.cc 
1
SetMemoryModel so probably they care in some way, however i think that if you set large memory model and run code which is prepared for SMALL it will work anyway 
1
1
STOP TYPE ADDRESS in here for a real calc rom?
HE HATES LINUX rust 
1 1void* with const void* in handlePCErr gwe@zero:~/Documents/wwce$ ./x
[1/10] cxx src/lib/string.cc
[2/10] cxx src/lib/opt.cc
[3/10] cxx src/lib/os.posix.cc
[4/10] cxx src/lib/char-tables.cc
[5/10] cxx src/gentool/pc.cc
FAILED: obj/prepare/src/gentool/pc.cc.o
clang++ -c -o obj/prepare/src/gentool/pc.cc.o src/gentool/pc.cc -MD -MF obj/prepare/src/gentool/pc.cc.o.d -Iinc -ggdb -fno-exceptions -fno-rtti -Iinc -std=c++2a -DUSE_PREPARE_SIMPLIFIED -I/usr/include/pkgconf
src/gentool/pc.cc:37:7: error: use of undeclared identifier 'pkgconf_queue_solve'
if (!pkgconf_queue_solve(c, &pkgq, &world, 10000)) {
^
src/gentool/pc.cc:39:3: error: use of undeclared identifier 'pkgconf_solution_free'
pkgconf_solution_free(c, &world);
^
src/gentool/pc.cc:56:2: error: use of undeclared identifier 'pkgconf_solution_free'
pkgconf_solution_free(c, &world);
^
3 errors generated.
[6/10] cxx src/gentool/config.cc
[7/10] cxx src/gentool/conf-kconfig.cc
[8/10] cxx src/lib/entry.cc
[9/10] cxx src/gentool/main.cc
ninja: build stopped: subcommand failed.
unknown argument -help when i pass --help arg to them... 1 1
Windows Registry Editor Version 5.00
[HKCU\Console]
VirtualTerminalLevel=dword:00000001 $ ./wwce-emu config.cfg
W: you are using a config file. we recommend you use rom8 instead, it's much better!
... $ ./wwce-emu config.cfg
W: you are using a config file. we recommend you use rom8 instead, it's much better!
... 
F800H is the low bit, 8:9000H is the high bit F800H is the low bit, 8:9000H is the high bit 
libcairo, stb_image and rsvg and still no image libcairo, stb_image and rsvg and still no image 
cc1: warning: command line option ‘-fno-rtti’ is valid for C++/D/ObjC++ but not for C and fatal error: concepts: No such file or directory errorsg++? 
1
render
in stead the official emulator reads er0 (which contains the address of the buffer when swi01 is called) when swi 01 is executed 
render
in stead the official emulator reads er0 (which contains the address of the buffer when swi01 is called) when swi 01 is executed 
1
♂️ 
no module errors
if (stpacp & 0xa0 == 0xa0)
stop_accept[1] = true;
else if (stpacp & 0x50 != 0x50)
stop_accept[0] = false; 
1
ea! even come from 
pywin32 from the reqs, and commenting out the VIDEODRIVER env var override), but something crashes with the SDL window
pywin32 from the reqs, and commenting out the VIDEODRIVER env var override), but something crashes with the SDL window 
strcpy expects a \0 at 8E00h but that byte is writeable in my emulator so it proceeds all the way down to SFR area ♂️ 
]♂️
1
D:\GWE\git\u8-emu-frontend\u8_emu>git apply u8emu.diff
error: corrupt patch at line 120D:\GWE\git\u8-emu-frontend\u8_emu>git apply u8emu.diff
error: corrupt patch at line 120 D:\GWE\git\u8-emu-frontend\u8_emu>git apply u8emu.diff
error: corrupt patch at line 120 
sahf \ <do calculation here> \ lahf and then store AH to somewhere else 
[32mI[0m: took 22ms
0xf0000005 error despite patching EXE (01.00.0000.0000) as opposed to (02.01.0030.0000)
(01.00.0000.0000) as opposed to (02.01.0030.0000) 
1 1
2222 and send the trace to me? 
0:B006H is not misaligned anymore but it still displays 0:B008H
1
./[path]/[path]
If the path is not specified./[path]/[path]
If the path is not specified 
os.system confirms this
i love colon
F014H.1, you need to have that bit set when a key is pressed for keyboard to work 
1 1 1
1
F310H.4, here i modify it on fx-580VN X real ROM emulator to get Solar MODEL OK! 1F310H.4, here i modify it on fx-580VN X real ROM emulator to get Solar MODEL OK! 
F310H.4, here i modify it on fx-580VN X real ROM emulator to get Solar MODEL OK! ill just supply with what casio 2009 did
fx991cnx folder
1
1
1
2
2 1
1
1
1
1
1
1
git pull if you cloned the repogit pull if you cloned the repo git pull if you cloned the repo 
python3 --version win32clipboard for windows, klembord for other systems win32clipboard for windows, klembord for other systems git pulled git pull again 
:= operator was added in 3.8
python main.py configs\config_fx580vnx.py 
plt.legend(["red", "green", "blue"]) though the normal order is blue → orange → green
112CEh is code
112Ceh
0x50 and 0xA0 to F008H, then writes 0x02 to F009H
these 3 things must happen in order for stop mode to be enabledF022H will count up and when it reaches the value of the word at F020H then exit stop mode and set F014H to 0x20 
<34 bytes> 78 5c 31 30 de e9 60 0d 32 48 
1
1
1
inja={0x34,0x7b,0x31,0x30,0x01,0x30,0x62,0xea,0xc8,0x3d,0x32,0x30,0x7e,0x94,0x30,0x30,0x34,0x7b,0x31,0x30,0x11,0x30,0x73,0xea,0xc8,0x3d,0x32,0x30,0x7e,0x94,0x30,0x30,0x34,0x7b,0x31,0x30,0x21,0x30,0x84,0xea,0xc8,0x3d,0x32,0x30,0x7e,0x94,0x30,0x30,0x34,0x7b,0x31,0x30,0x31,0x30,0x95,0xea,0xc8,0x3d,0x32,0x30,0x7e,0x94,0x30,0x30,0x74,0x89,0x31,0x30,0x00,0x00,0x02,0x26,0x31,0x30,0x39,0xf0,0xa6,0xa8,0x30,0x30,0x39,0xf0,0xa8,0x9f,0x30,0x30,0xd8,0x39,0x31,0x30,0x74,0x89,0x31,0x30,0x00,0x01,0x74,0x89,0x31,0x30,0x00,0x01,0xa0,0x9c,0x30,0x30,0x30,0x30,0x39,0xf0,0x02,0x26,0x31,0x30,0x01,0x05,0x3c,0x9f,0x30,0x30,0x78,0x5c,0x31,0x30,0x30,0xea,0x83,0x3f,0x32,0x30,0x61,0x61,0x61,0x61,0x61,0x61,0x61,0x61,0x61,0x61,0x61,0x61,0x61,0x61,0x61,0x61,0x61,0x62,0x62,0x62,0x62,0x62,0x62,0x62,0x62,0x62,0x62,0x62,0x62,0x62,0x62,0x62,0x62,0x62,0x63,0x63,0x63,0x63,0x63,0x63,0x63,0x63,0x63,0x63,0x63,0x63,0x63,0x63,0x63,0x63,0x63,0x64,0x64,0x64,0x64,0x64,0x64,0x64,0x64,0x64,0x64,0x64,0x64,0x64,0x64,0x64,0x64,0x64} injb={0x30,0x30,0x30,0x30,0x30,0x30,0x30,0x30,0x30,0x30,0x30,0x30,0x30,0x30,0x30,0x30,0x30,0x30,0x30,0x30,0x30,0x30,0x30,0x30,0x30,0x30,0x30,0x30,0x30,0x30,0x30,0x30,0x30,0x30,0x78,0x5c,0x31,0x30,0xde,0xe9,0x60,0x0d,0x32,0x48} for i=0,500 do data[i+0xe9e0]=inja[i+1] end for i=0,50 do data[i+0xd180]=injb[i+1] end 1
( cause the stack to go into the end of the equation buffer 
@totalynce
1 85651 0.041 0.000 0.054 0.000 main.py:1749(keyboard)
well looks like keyboard takes a lot of time def keyboard(self):
ki = 0xff
if len(self.keys_pressed) > 0:
ko = self.sim.sfr[0x44] ^ 0xff if self.ko_mode else self.sim.sfr[0x46]
try:
for val in self.keys_pressed:
if val == None: continue
if ko & (1 << val[1]): ki &= ~(1 << val[0])
except RuntimeError: pass
self.sim.sfr[0x40] = ki
if not config.real_hardware:
temp = self.read_emu_kb(0)
if temp in (2, 8) and [self.read_emu_kb(i) for i in (1, 2)] != [1<<2, 1<<4]: self.write_emu_kb(0, 0)
elif temp in (5, 7) and not self.qr_active:
self.qr_active = True
tk.messagebox.showinfo('QR code', 'Detected emulator ROM QR code!\nGet the URL with right-click > Extra functions > QR code export > Copy URL to clipboard\n\nNote: due to the nature of the emulator, you might not see the QR code immediately')
elif temp == 6: self.qr_active = False
1
1 def keyboard(self):
ki = 0xff
if len(self.keys_pressed) > 0:
ko = self.sim.sfr[0x44] ^ 0xff if self.ko_mode else self.sim.sfr[0x46]
try:
for val in self.keys_pressed:
if val == None: continue
if ko & (1 << val[1]): ki &= ~(1 << val[0])
except RuntimeError: pass
self.sim.sfr[0x40] = ki
if not config.real_hardware:
temp = self.read_emu_kb(0)
if temp in (2, 8) and [self.read_emu_kb(i) for i in (1, 2)] != [1<<2, 1<<4]: self.write_emu_kb(0, 0)
elif temp in (5, 7) and not self.qr_active:
self.qr_active = True
tk.messagebox.showinfo('QR code', 'Detected emulator ROM QR code!\nGet the URL with right-click > Extra functions > QR code export > Copy URL to clipboard\n\nNote: due to the nature of the emulator, you might not see the QR code immediately')
elif temp == 6: self.qr_active = False 
1 1 100h (normally mode 68), the calculator will act like it is in SYSTEM mode 
I’m still learning) on an arduino. I assume it it’ll need to be somewhat powerful so I was thinking like an ESP?
I wanted to simulate or just run the FX991ex on an arduinoI’m still learning) on an arduino. I assume it it’ll need to be somewhat powerful so I was thinking like an ESP?
I wanted to simulate or just run the FX991ex on an arduino 
mem_edit.ReadFn = [](const ImU8* data, size_t off) -> ImU8 {
return me_mmu->ReadData(off + 0x9000);
};
mem_edit.WriteFn = [](ImU8* data, size_t off, ImU8 d) {
return me_mmu->WriteData(off + 0x9000, d);
};
size_t v = 0x9188;
1
1
2